sideloading applications Archives

AppWizard

August 14, 2025

Surge in Android Malware Targets Banking Apps with NFC Fraud

A new wave of Android malware is targeting banking applications, utilizing techniques such as NFC relay fraud, call hijacking, and root-level exploits. Variants like PhantomCard, SpyBanker, and KernelSU are designed to infiltrate devices and manipulate transactions in real time. PhantomCard mimics legitimate NFC payment processes, SpyBanker hijacks calls from financial institutions, and KernelSU exploits kernel vulnerabilities for persistent access. This malware has affected thousands of devices, with attackers using disguises on the Google Play Store and phishing campaigns. A related variant, Anatsa, impacted over 90,000 users through fake PDF applications. The rise of such malware correlates with the increasing adoption of contactless payments, particularly in Europe and Asia. Experts recommend that banks enhance their defenses with behavioral analytics and that users enable app verification. Additionally, malware like KernelSU allows evasion of detection by operating at the system's core. Cybersecurity firms suggest a multi-layered security approach, including device encryption and AI-driven threat detection, to combat these evolving threats.

AppWizard

May 14, 2025

Google Will Prevent Unknown App Downloads During Calls On Android 16

Google has introduced Advanced Protection for Android devices, aimed at enhancing security for users, especially those in public-facing roles. This feature was showcased on May 13, 2025, and will be released with Android 16 in June. Key functionalities include an Offline Device Key, Theft Detection, and Play Protect. Advanced Protection will restrict sideloading applications and downloading from third-party sources. It also blocks downloads from unknown sources during active phone calls and restricts access to banking applications during calls. Users will be unable to share screens with third-party applications while on calls. The initiative is currently being tested in various countries.

AppWizard

May 14, 2025

Android launches new protections against phone call scammers

Google is implementing new features to enhance security for Android users against phone call scams. Users will be restricted from sideloading applications or granting sensitive permissions while on a call with an unknown contact, receiving a notification that states, “This setting is blocked to protect your device.” Google has also prevented users from disabling its Play Protect security service during calls. These measures are available for devices running Android 16. Additionally, Google is piloting a feature for banking apps in the UK that alerts users of a “likely scam” when accessing these apps while sharing their screen with an unknown caller. Users can choose to end the call or face a 30-second delay before accessing their banking app’s screen. This feature will roll out for devices running Android 11 and newer. These updates build on existing scam protection tools, including AI that identifies potential scam callers and integrates scam detection into Google Messages.

Winsage

May 10, 2025

Huawei’s HarmonyOS Takes On Windows 11 with Enhanced UI and Performance — But Deprived of App Sideloading & Backward Compatibility

Huawei has introduced HarmonyOS Next, its latest operating system for consumer laptops, designed exclusively for modern laptop models and lacking backward compatibility with older devices. The OS features AI-driven functionality through Celia, Huawei's AI assistant, and comes pre-installed with essential applications like WPS Office. Visually, it resembles Apple's macOS, including a software shortcut bar at the bottom of the screen. HarmonyOS Next restricts sideloading applications, requiring users to access software through Huawei's native "App Gallery," a strategy aimed at reducing reliance on Western software among Chinese consumers.

AppWizard

March 31, 2025

Android users ALERT! Google has an update but you need to stop installing THESE apps?

Google's AI-driven threat detection and security measures blocked approximately 2.36 million policy-violating applications from being released on the Play Store last year. In February, Google removed hundreds of malicious applications that were infecting devices with adware and malware. Over 50 times more Android malware originates from internet-sideloaded sources compared to those found on the Play Store. Google is expanding its Play Protect feature across all applications and the upcoming Android 15 will introduce live threat detection. Sophos warned about PJobRAT malware, which can steal SMS messages, contacts, and files from infected Android devices. Experts advise against sideloading apps unless their legitimacy and security are certain.

AppWizard

February 23, 2025

These apps aren’t on the Play Store, but I always sideload them on my Pixel

Google Pixel users are increasingly sideloading applications from third-party repositories, enhancing their devices' functionality. The Smartspacer app improves the At a Glance widget by integrating with third-party apps and Google services, offering advanced control and enhancing the Always-On Display. Smartspacer is available on GitHub, along with various plugins. Obtanium helps users manage and update sideloaded apps, providing a centralized hub for tracking updates, and is accessible on GitHub and F-Droid. Breezy Weather is a highly regarded weather app that offers customizable features and integrates well with Pixel's design, available on F-Droid and GitHub, and can also be updated using Obtanium.

AppWizard

December 4, 2024

Google’s beefing up Android app security, but not everyone’s going to be happy

Google is enhancing its Play Integrity API to provide faster and more secure device attestation for Android applications. The updated API will make it harder to spoof attestation checks and will introduce measures to verify that apps are installed via the Play Store, potentially affecting sideloaded applications. Average Android users can expect improved app performance, although some may receive notifications about outdated security updates. Developers can opt into the new system now, with a broader rollout planned for May 2025.

AppWizard

November 5, 2024

Upcoming Google Play update could strengthen protection against harmful apps (APK teardown)

Google is developing a feature for its Play Store that allows users to temporarily pause Play Protect for one day instead of disabling it completely. This feature aims to enhance user safety by automatically reactivating Play Protect after the pause period and includes a warning prompt about potential scams when users attempt to pause or turn off the security feature. The feature is expected to be available to users in the near future.

AppWizard

August 3, 2024

Do Not Click Here—New Android Threat Deletes Everything On Your Phone

Google is actively removing thousands of applications from its Play Store and enhancing security features in the upcoming Android 15, which will include live threat detection capabilities. A new Android Remote Access Trojan (RAT) called "BingoMod" has been identified, which steals sensitive information and wipes infected devices to erase evidence. BingoMod infiltrates devices through SMS messages, disguising itself as a legitimate security application, and collects user credentials, SMS messages, and account balances before executing fraudulent transactions. Currently, BingoMod is not available on the Play Store, and there are increasing reports of malware spread via SMS campaigns. Users are advised to stick to official app stores, verify app developers, be cautious with app permissions, avoid clicking on suspicious links, and ensure Google Play Protect is activated. Google has stated that Play Protect will defend against this malware threat, and the introduction of live threat detection will improve monitoring of app behaviors involving high-risk permissions.

AppWizard

May 6, 2024

Android smartphones at risk of ‘Dirty Stream’ attack via Google Play Store apps- Report

A significant security flaw called the "Dirty stream" attack has been discovered in Android applications by Microsoft. This vulnerability could allow cybercriminals to hijack apps or access confidential information, affecting popular apps like Xiaomi Inc.'s File Manager and WPS Office. The solution is to update the affected apps to prevent fraudulent activities.